Nostr notes by Jon Greig

The ATF said it recently had a “major” cyber incident. The ...

2026-08-27T12:32:02Z

The ATF said it recently had a “major” cyber incident. The agency appeared on the Qilin ransomware leak site on Wednesday

An ATF spox told me the issue “involved a standalone computer system containing information about targets of ATF investigations.”

https://therecord.media/doj-atf-cyberattack-qilin-ransomware

Federal agencies said there is an “active threat” targeting ...

2026-08-19T18:18:46Z

Federal agencies said there is an “active threat” targeting the Siemens PLCs of critical infrastructure organizations using AI-generated exploit scripts, in what they called an “evolution” in capabilities

https://therecord.media/nsa-fbi-warns-of-hackers-using-ai-generated-tools-critical-infrastructure

The Trump admin wants to enlist cyber firms to surveil and hack ...

2026-08-13T13:56:48Z

The Trump admin wants to enlist cyber firms to surveil and hack cybercriminals with oversight from DOJ + DHS

The memo says they will not sanction any operation that results in loss of life or “rise to the level of use of force or armed attack under international law.”

https://therecord.media/trump-cyber-crime-offensive

Trump’s FCC just removed cyber regulations governing telecoms ...

2025-11-20T17:38:25Z

Trump’s FCC just removed cyber regulations governing telecoms that were put in place after Chinese hackers stole the call records of Trump and JD Vance last year

Several senators told me telecoms lobbied heavily for the rules to be removed

https://therecord.media/fcc-removes-biden-era-cybersecurity-rules-telecoms-salt-typhoon

Federal agencies have about 24 hours to patch two critical bugs ...

2025-09-25T18:52:29Z

Federal agencies have about 24 hours to patch two critical bugs in a line of Cisco firewalls

patch CVE-2025-30333 and CVE-2025-20362 asap

https://therecord.media/cisco-asa-firewall-bugs-cisa-federal-agencies-warning

Clorox is claiming in a lawsuit that a Cognizant help desk worker ...

2025-07-23T16:40:58Z

Clorox is claiming in a lawsuit that a Cognizant help desk worker reset Okta and Microsoft passwords three different times for a cybercriminal without verifying who was asking

Clorox says it lost $380 million from the August 2023 hack

https://therecord.media/clorox-cyberattack-lawsuit-cognizant-it-contractor

In a rare move, CISA gave federal agencies just one day to patch ...

2025-07-11T15:17:42Z

In a rare move, CISA gave federal agencies just one day to patch Citrix Netscaler bug CVE-2025-5777

Patch ASAP #CitrixBleed2 #2Citrix2Bloody

https://therecord.media/cisa-orders-agencies-patch-citrix-bleed-2

A U.S. congressional campaign in Oregon mistakenly hired a North ...

2025-05-01T19:50:35Z

A U.S. congressional campaign in Oregon mistakenly hired a North Korean IT worker to build its website, one expert said

Dozens of experts and law enforcement at RSA said the campaign is now out of control, impacting thousands of companies

https://therecord.media/north-korean-it-worker-scam-expands-rsa

In a last minute change, #CISA extended its contract with #MITRE ...

2025-04-16T16:50:05Z

In a last minute change, #CISA extended its contract with #MITRE to run the #CVE Program until March 2026 but there are already multiple efforts to create alternative, international versions of the platform outside of the control of the US government

https://therecord.media/cisa-extends-cve-program-contract-with-mitre

there is absolutely no bottom. we’re not even six months into ...

2025-03-27T21:06:25Z

there is absolutely no bottom. we’re not even six months into these people being in charge

More than 1 million #NYU students had their information leaked by ...

2025-03-26T17:18:24Z

More than 1 million #NYU students had their information leaked by a hacker who defaced the school website and previously exposed the SSNs of 7 million people who went to the University of Minnesota

https://therecord.media/hacker-nyu-website-admissions-race

This is disgusting ...

2025-03-13T18:03:08Z

This is disgusting

https://taskandpurpose.com/news/arlington-cemetery-scrubs-website-dei/

HHSGov has taken down nearly all of the pages about their recent ...

2025-02-03T22:05:48Z

HHSGov has taken down nearly all of the pages about their recent fines targeting healthcare firms that exposed patient data during ransomware attacks

Why?

Trump's pick for DHS Secretary #Noem spent her hearing ...

2025-01-17T20:05:51Z

Trump's pick for DHS Secretary #Noem spent her hearing bashing CISA's work fighting foreign disinformation campaigns, pledging to make the agency "smaller, more nimble" amid several cybersecurity crises involving China and Russia.

Never felt less safe listening to this hearing. Deeply unserious folks now at the wheel pledging to remove what little protections we barely have now

https://therecord.media/kristi-noem-cisa-smaller-nimble

Costa Rica's state energy company was hit with ransomware ...

2024-12-02T16:03:03Z

Costa Rica's state energy company was hit with ransomware last week, forcing the country to extend fuel purchase hours for manual payments

https://therecord.media/costa-rica-state-energy-company-ransomware

Using data from eCrime.ch, the Ransomware Task Force said there ...

2024-09-26T13:33:21Z

Using data from eCrime.ch, the Ransomware Task Force said there were 6,670 ransomware attacks in 2023 that affected at least 117 countries. Both numbers are records

https://therecord.media/ransomware-task-force-2023-global-report

CISA conducted 143 cyber risk assessments in 2023, finding that ...

2024-09-13T20:34:06Z

CISA conducted 143 cyber risk assessments in 2023, finding that stolen accounts are still the simplest way for hackers to breach federal networks

https://therecord.media/stolen-account-info-federal-agencies-cisa

As a Haitian-American I am appalled and terrified at what ...

2024-09-09T19:04:44Z

As a Haitian-American I am appalled and terrified at what we're seeing today.

Elected officials, using their verified government accounts (even the US HOUSE JUDICIARY ACCOUNT) are spreading a story that is provably false in order to stoke violence against Haitians. This was literally outlined in the DOJ documents about the Russian efforts to spread misinformation.

Every Haitian in America that I know is terrified. I just don't know how we address something like this when half (if not more) of our country is willing to act on straight-up disinformation

What are we supposed to do? How can you ever get through to people that would believe stuff like this?